Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File:                     r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier:          ra2r7JfgoYm2Me+X4ZV+/TcprQAvfNc6EtOwSsrMGF0=
Subject key identifier:   4B:09:D4:38:EF:94:AF:2E:95:BE:CF:59:45:40:B4:BE:97:03:AA:CA
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer:       /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial:       01904566CD50F3B6E6BCBAD7E5F2ED7A697D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number:          10AE
Signing time:             Sun 23 Jun 2024 14:01:23 +0000
Manifest this update:     Sun 23 Jun 2024 14:01:23 +0000
Manifest next update:     Mon 24 Jun 2024 14:01:23 +0000
Files and hashes:         1: 44whc6aRXwGDbnrDOy4tA4YzgVU.roa (hash: RZE2kkEhM5GYOllx8ePYyXfl88kxzxsJYku6YVwkMoo=)
                          2: LJN-Q6_cA7EHl3tl0JilNBul6l4.roa (hash: d3kDJJ83pI+gu4UalpKpd0PvEmc3jP11DfMPKuf2Uns=)
                          3: cF8aPLwBYlzSs2jar2EQFc8n4pg.roa (hash: aSledVkEtPZhx3ueeiEc64iKivvsjbA4E+aXG+iUFrk=)
                          4: cPkr4mGd7cz-lM0OfqIN9tj0sxE.roa (hash: s2FgGcJNH5yrJvtIB6AJdYbcop/rJ71EWNNKetny6Ds=)
                          5: p2E_ScsQXXdT1MxZO55K6CtmzrY.roa (hash: fGpe9OtsNeQytigT30u3aAc7sPj2sI9nW3eRudjFGNk=)
                          6: pSDUQP1b5o3nPX7ow0f9EhAxn_c.roa (hash: Rh10inA0ISfz2+kdDo6jZ1yv7uyvCL+KqzVv6El2/lc=)
                          7: qwlSxtg4NYCE6t4YqCVQOXVgQyM.roa (hash: Gy6OgymR1Psb7gVauOJqAMNP96Bmu7EkYfBG/5js3f0=)
                          8: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: 8MW4IFfnOpB9Wot5mzZ6zODDJgccFgcacXPN5N3C+6g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:cd:50:f3:b6:e6:bc:ba:d7:e5:f2:ed:7a:69:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
        Validity
            Not Before: Jun 23 14:01:23 2024 GMT
            Not After : Jun 24 14:01:23 2024 GMT
        Subject: CN=4b09d438ef94af2e95becf594540b4be9703aaca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:6f:68:18:4c:cf:65:e9:44:c1:d6:87:c3:
                    f7:ec:2e:46:8f:ee:d1:fd:98:ef:90:ec:cb:e1:25:
                    86:64:43:91:2b:a7:83:4e:65:e7:c0:04:44:bd:fb:
                    39:93:bc:be:b0:db:2b:c7:cd:a8:3c:07:c5:6b:e7:
                    42:6c:67:81:98:ba:48:fa:af:16:3f:d5:65:c3:4a:
                    39:ff:e4:1f:f7:cd:ed:d4:a2:34:f1:08:20:94:7f:
                    58:0d:af:e2:0a:00:16:67:db:04:34:2c:89:93:87:
                    7b:6f:d8:fe:1c:c0:f0:12:c3:ed:d3:87:14:27:39:
                    cb:08:14:55:bf:0a:17:2e:71:78:44:c9:74:d6:fe:
                    28:c5:a4:40:0a:75:18:25:0b:9b:f4:a3:69:1d:a0:
                    0d:8a:48:7b:e8:de:3c:ec:21:34:ba:98:33:6d:51:
                    28:7f:95:80:09:b3:6f:7d:7a:92:93:d8:57:f5:f1:
                    c1:9e:fa:03:8d:12:1a:88:13:22:8f:10:9b:cb:f0:
                    cc:49:41:ff:09:59:49:65:f1:ed:6e:e5:17:92:12:
                    44:91:46:76:c3:2a:49:70:f2:1d:42:df:f2:e7:ca:
                    de:97:fe:21:4c:99:45:b9:2a:5a:84:db:ab:02:af:
                    fd:84:ab:f5:b9:23:02:03:32:d9:3a:c0:c3:59:2d:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:09:D4:38:EF:94:AF:2E:95:BE:CF:59:45:40:B4:BE:97:03:AA:CA
            X509v3 Authority Key Identifier:
                keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:45:c8:08:ee:dd:09:c9:60:66:f5:47:19:be:a4:47:84:57:
         76:6f:25:32:aa:5c:70:6c:e0:33:53:88:e4:2b:11:c8:3f:a7:
         31:24:c0:e2:56:a6:6d:69:37:96:10:0a:fc:8e:fd:78:84:9a:
         02:02:19:1e:99:2e:55:f4:59:7e:54:ac:14:10:34:6b:43:ea:
         f2:29:f5:70:88:8c:e2:60:28:d1:e0:3f:1d:48:98:6e:1d:ba:
         76:53:61:e9:54:6c:31:f7:dd:18:ed:31:04:60:31:70:22:57:
         3d:f7:ac:e3:8b:5d:7d:2b:45:93:6b:93:8e:0f:2f:c3:de:63:
         d6:19:57:54:3a:c8:e4:3e:69:1c:0f:23:95:1c:e0:e6:56:87:
         03:d4:ce:15:51:53:52:32:be:79:fb:65:7e:cd:bf:25:da:b4:
         7f:2c:70:3d:f6:cf:97:47:4e:45:ab:6c:07:cb:6c:e7:44:f2:
         98:cf:55:97:78:31:26:74:15:9e:a6:4c:ef:e3:7b:68:9e:cd:
         e1:3f:51:22:dd:ba:ce:2f:13:a3:01:0e:87:04:3f:6d:d2:8e:
         46:47:3a:1d:23:ac:9f:ea:7a:32:c8:33:ce:e8:89:b0:02:1f:
         34:8a:10:bc:19:26:78:f6:a5:9b:c5:a9:d9:d2:1e:77:30:84:
         85:2f:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:08:22 2024 by rpki-client on console-ams.rpki-client.org